CVE-2022-20746 Cisco Firepower Threat Defense Software TCP Proxy Denial of Service Vulnerability

What is CVE-2022-20746?

CVE-2022-20746 is a high-severity vulnerability in Cisco Secure Firewall Threat Defense, published on 3 May 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability in the TCP proxy functionality of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper handling of TCP flows. An attacker could exploit this vulnerability by sending a crafted stream of TCP traffic through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Weakness: CWE-476

Which versions are affected by CVE-2022-20746?

It affects 1 product.

Products include Cisco Secure Firewall Threat Defense.

How do I fix CVE-2022-20746?

No fix has been published for CVE-2022-20746 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-20746 being exploited?

There is no known exploitation of CVE-2022-20746 in the wild and no public exploit code.

Other vulnerabilities in Cisco Secure Firewall Threat Defense

• CVE-2024-20412 Hardcoded credentials in Cisco Firepower Threat Defense Software Critical 9.3
• CVE-2024-20330 Memory corruption in Cisco Firepower Threat Defense Software High 8.6
• CVE-2024-20339 Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability High 8.6
• CVE-2024-20351 Cisco Firepower Threat Defense Software Snort Firewall Denial of Service Vulnerability High 8.6
• CVE-2023-20083 Denial of service in Cisco Firepower Threat Defense Software High 8.6

All Cisco Secure Firewall Threat Defense vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-75m2-92fc-x3mj.